Based on the described situation and the guidance already received from Microsoft, a fully compromised personal Microsoft account where the attacker has changed the primary aliases, password, and security info can reach a state where it is not recoverable.
For consumer Microsoft accounts (including Outlook.com/Hotmail and game entitlements like Minecraft), recovery is handled only through the automated account recovery and compromise flows. If those systems determine that ownership cannot be verified, support cannot override them or manually restore access, even if the account is old or has significant game progress.
The only supported options in this scenario are:
- Use the official hacked/compromised account flow one more time
- Go to the hacked-account helper and follow the steps in How to recover a hacked or compromised Microsoft account. This may direct to the account recovery form.
- When using the recovery form, provide as much accurate historical information as possible (old passwords, subject lines of emails, contacts, etc.) as described in the referenced Q&A guidance. If the automated system still rejects the request, the account cannot be restored.
- If the account is deemed unrecoverable
- Follow the advice already given by Microsoft Support: create a new Microsoft account.
- Use that new account going forward for Outlook.com/Hotmail and for games.
- For Minecraft or other games, check with the specific game’s support (for example, Minecraft Support) to see if they offer any independent options for transferring or recovering entitlements; however, the context indicates there is no guarantee that Minecraft progress or licenses can be recovered once the Microsoft account itself is lost.
- Protect the new account and other services
- Run a full malware/antivirus scan on all devices used with the old account before signing in with the new one, as recommended in How to recover a hacked or compromised Microsoft account.
- Enable strong security on the new account (strong password, up-to-date security info, and multi-factor authentication where available).
- Inform contacts that the old email address is compromised so they can ignore any suspicious messages.
If the automated recovery and hacked-account flows have already been completed and Microsoft has confirmed the account is “compromised beyond repair,” there is no supported way to force recovery of that specific Microsoft account or its associated game progress.
References: